The HTML comes from the tenant admin who is trusted not to insert malicious html.